Frequently Asked Question

Security Advisor is responsible for a well-rounded checkup on the system settings of DSM to secure your Synology NAS. When you receive this message from Security Advisor, one of the possibilities is that you may have installed/executed uncertified third-party packages in your Synology NAS. Using such packages may have the system files of DSM modified and thus render your Synology NAS vulnerable. To protect your Synology NAS from related security issues, you are strongly recommended to obtain Synology-verified packages via Package Center or Synology Download Center.

Below are the reported uncertified packages that may harm the health of your Synology NAS. We will continue updating this list to help you stay alert to such packages.

Package Name	Symptom	Impact	Severity
IDrive	chmod 4755 /bin/busybox	Allows local users to gain privileges	High
MinimServer	Modified: /lib/libinotifytools.so.0	System instability	High
SynoPHPAuth	chmod 4755 /usr/syno/sbin/synouser	Allows local users to gain privileges	High
Init 3rdparty	Modified: /usr/syno/share/nginx/DSM_Main.mustache	System instability	Low
Java6	/usr/share/zoneinfo/zone.tab	Inconsistent time zone settings	Low
Madsonic	Modified: /usr/syno/bin/ffmpeg file owner and group	System instability	Low
Notification Forwarder	Modified: /usr/syno/bin/synodsmnotify Created: /usr/syno/bin/synodsmnotify.1	System instability	Low
SynoZWave	/lib/modules/usbserial.ko /lib/modules/ftdi_sio.ko	System instability	Low
Twonky	Created: /bin/.tv7	System instability	Low